Anreas, Are there any limitations to just starting the charon daemon directly (versus using the “ipsec” script)?
/Ryan On 7/18/15, 6:26 AM, "Andreas Steffen" <[email protected]> wrote: >Hi Ahmand, > >no, just start charon itself: > > /usr/libexec/ipsec/charon & > >If you have an Ubuntu or Debian platform you can use the attached >/etc/init.d/charon runlevel script and start and stop the daemon >with > > sudo service charon start > > sudo service charon stop > >If you have Fedora or some other OS supporting systemd then you >can use the charon-systemd daemon variant. > >Best regards > >Andreas > >On 07/18/2015 12:12 PM, Mohammad Ahmad wrote: >> Hey Andreas, >> >> Thank you for response. Quick followup, I need to run 'ipsec start' >> with the sample configuration file you have shared to start charon in >> the background? >> >> I apologize for asking very basic questions. I'm just getting started >> with strongswan. >> >> >> On Sat, Jul 18, 2015, 2:46 AM Andreas Steffen >> <[email protected] <mailto:[email protected]>> >> wrote: >> >> Hi Ahmad, >> >> if you intend to use the vici plugin then you need neither >> starter nor stroke. Just start the charon daemon in the >> background. The minimum of plugins you need are e.g. >> >> >> https://www.strongswan.org/uml/testresults/swanctl/rw-cert/moon.strongswan.conf >> >> Best regards >> >> Andreas >> >> On 07/18/2015 04:26 AM, Mohammad Ahmad wrote: >> > Hi, >> > >> > I want to run charon and plan to speak to it using a vici plugin I am >> > developing. >> > With racoon, I run racoon -f /path/to/config but with charon, I see a >> > number of tools that can be used to achieve this, stroke, starter, >> > ipsec but am unsure which one will require the minimum number of >> > packages to be installed (I want to keep that to a minimum). >> > >> > More infomation >> > I will be adding the ipsec policies manually and am using ipsec in >> > tunnel mode. I have two sites behind each of which is a subnet. >> > >> > Looking forward to hearing from you guys. >> > >> > Ahmad >> >> ====================================================================== >> Andreas Steffen >> [email protected] <mailto:[email protected]> >> strongSwan - the Open Source VPN Solution! >> www.strongswan.org <http://www.strongswan.org> >> Institute for Internet Technologies and Applications >> University of Applied Sciences Rapperswil >> CH-8640 Rapperswil (Switzerland) >> ===========================================================[ITA-HSR]== >> > >-- >====================================================================== >Andreas Steffen [email protected] >strongSwan - the Open Source VPN Solution! www.strongswan.org >Institute for Internet Technologies and Applications >University of Applied Sciences Rapperswil >CH-8640 Rapperswil (Switzerland) >===========================================================[ITA-HSR]== _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
